Damn_Vulnerable_C_Program

Note: file name has been changed from imgRead.c to dvcp.c, if you are watching videos, you will see imgRead.c but in github repo you will see dvcp.c, please use correct filename. Damn Vulnerable C ProgramDVCP My YouTube Channel: https://www.youtube.com/user/MrHardik05/featured?viewas=subscriber...

CVE-2025-46206

There is a denial of service vulnerability in MuPDF 1.25.6 and earlier versions. When an attacker runs the "mutool clean poc /dev/null" command, the program will fall into an infinite recursion between the stripoutlines and stripoutline functions in pdf-clean-file.c until the stack is exhausted...

CVE-2026-40345

deepmerge-ts mergeleft.self, right.self - mergeleft.self, right.self - mergeleft.self, right.self...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

CVE-2026-34308

CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory — April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0–8.0.45 , 8.4.0–8.4.8 , and...

EUVD-2026-113364

Forge: Denial of service in TLS record processing via call stack exhaustion...

Forge: Denial of service in TLS record processing via call stack exhaustion

Summary Connections created with forge.tls.createConnection processed received TLS records recursively, one stack level per record. A peer can send one chunk of thousands of small records, such as heartbeat records, which are accepted before the handshake, and process throws RangeError: Maximum...

GHSA-HQQ3-7JHF-C5JX Forge: Denial of service in TLS record processing via call stack exhaustion

Summary Connections created with forge.tls.createConnection processed received TLS records recursively, one stack level per record. A peer can send one chunk of thousands of small records, such as heartbeat records, which are accepted before the handshake, and process throws RangeError: Maximum...

npm: Forge: Denial of service in TLS record processing via call stack exhaustion

npm: Forge: Denial of service in TLS record processing via call stack exhaustion vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

CVE-2026-61846

A flaw was found in crass. The CSS parser is vulnerable to a Denial of Service DoS because it recursively processes simple blocks and functions without enforcing a depth limit. A remote attacker can supply a specially crafted CSS input containing deeply nested structures to trigger stack exhausti...

CVE-2026-62303

Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...

EUVD-2026-114262

Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...

CVE-2026-62303

The Pistache REST toolkit (versions 0.0.5 through 0.4.26 ) is vulnerable to a Denial of Service (DoS) via stack exhaustion. The root cause is located in src/server/router.cc within the SegmentTreeNode::sanitizeResource() function, which uses std::regex_replace() with the //+ expression to collaps...

CVE-2026-62303 Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)

Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...

CVE-2026-62303 Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)

Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...

CVE-2026-119591

A flaw was found in SQLite. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. By supplying a specially crafted database file or SQL query that performs a count operation over a large multi-row VALUES clause, an attacker can trigger excessive...

CVE-2026-119591

SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization that allows attackers to crash the host process via count over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TKPLUS expressions who...

CVE-2026-119376

SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursion i...

CVE-2026-119371

SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in an...